STIGQter: STIG Summary: Honeywell Android 9.x COBO Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 14 Jan 2021:

On all Honeywell Mobility Edge Android Pie devices, cryptography must be configured to be in FIPS 140-2 validated mode.

DISA Rule

SV-235093r626530_rule

Vulnerability Number

V-235093

Group Title

PP-MDF-301010

Rule Version

HONW-09-008400

Severity

CAT I

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure the Honeywell Android device to enable FIPS mode.

On the MDM console:
1. Ask the MDM Administrator to edit the following item in DeviceConfig.xml:
Modify item: DeviceConfig >> HoneywellSetting >> EnforceOSFipsMode
Value sample: 1: Enable OS FIPS mode; 0: Disable OS FIPS mode
2. In MDM console, the MDM Administrator will package this DeviceConfig.xml and push this package to the CN80G device.

On the Honeywell Android Pie device:
1. Open Settings >> Honeywell Settings >> FIPS Enforce Mode.
2. Enable FIPS Enforce mode.

Check Contents

Review Honeywell Android device configuration settings to determine if the mobile device is in FIPS enforce mode.

This validation procedure is performed on the Android Pie device.

On the Honeywell Android Pie device:

1. Open Settings >> Honeywell Settings >> FIPS Enforce Mode.
2. Verify the option of "FIPS Enforce Mode" is enabled.

If the option of "FIPS Enforce Mode" is disabled on the Honeywell Android Pie device, this is a finding.

Vulnerability Number

V-235093

Documentable

False

Rule Version

HONW-09-008400

Severity Override Guidance

Review Honeywell Android device configuration settings to determine if the mobile device is in FIPS enforce mode.

This validation procedure is performed on the Android Pie device.

On the Honeywell Android Pie device:

1. Open Settings >> Honeywell Settings >> FIPS Enforce Mode.
2. Verify the option of "FIPS Enforce Mode" is enabled.

If the option of "FIPS Enforce Mode" is disabled on the Honeywell Android Pie device, this is a finding.

Check Content Reference

M

Target Key

5275

Comments